I was working on an ASA config and ran into an interesting error. I needed to not perform NAT on the traffic from the inside LAN to the DMZ. I configured an access-list:

And then specified to not perform NAT:

I then needed to add another line to the InsideNoNAT_ACL, and that is where I received the error.

All this error message is saying is that the new line in the access-list was not added to the active NAT table, but was added to the access-list. Upon doing some searching, I read in several places that a reboot fixed the problem. While this is true, it is not necessary. All that needs to be done is to remove and reapply the nat statement.

This rebuilds the NAT rules and applies all rules in the ACL. Much better than a reload!